Red Hat Security AdvisoryRHSA-2025:11681
OpenShift Container Platform 4.16.45 bug fix and security update
Released 2025-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 5 records
Priority HIGH 73
jq is a command-line JSON processor.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00557 · Published 2025-05-21 · Partial fix CWE-121
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority LOW 39
A flaw was found in Podman.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.00515 · Published 2025-06-24 · Partial fix · 5.5.2, 6:5.4.0-12.el10_0 +12 CWE-295
Priority LOW 33
When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2025-01-28 · Partial fix · 1.2.4 CWE-377
Priority LOW 16
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00585 · Published 2024-11-04 · Partial fix · 4.5.1 CWE-755